
🚨 GitHub confirmed: ~3,800 internal repos breached by TeamPCP.
The entry point? One employee. One poisoned VS Code extension from the official marketplace.
No customer data impacted — but GitHub's own source code is now being sold for $50k+ on a cybercrime forum.
If you haven't audited your team's VS Code extensions, now is the time.
@github #CyberSecurity #SupplyChainAttack

English











